When remote users connect through a Point to Site (P2S) VPN in Azure Virtual WAN, you can route all their traffic including internet bound traffic through Azure Firewall by pushing a default route (0.0.0.0/0). This approach is commonly referred to as forced tunneling. 🔥 cloudtips.nl/secure-your-...

Enjoying vacation 💪🏻

[Share] 🔥 Microsoft Ignite 2025 Next Steps After attending Microsoft Ignite 2025, your next steps to continue your learning journey! #msignite #mvpbuzz

In this blog, I will demonstrate how to use Azure Container App Jobs to automate tasks with Microsoft Graph. For example, you might want to back up your Conditional Access rules from Entra ID to a secure location, such as an Azure Storage Account. 🔥 cloudtips.nl/automate-mic...

In this blog, I’ll demonstrate how to automate Privileged Identity Management (PIM) in Azure Landing Zones using Azure Bicep and the Microsoft Graph Provider, powered by Microsoft Entra ID Governance. cloudtips.nl/microsoft-en...

Bring Microsoft Learn content straight into your AI assistant or app with the Microsoft Learn Model Context Protocol (MCP). cloudtips.nl/why-you-shou...

This week's Entra newsletter is out. Get it at https://entra.news

🚨 The Terraform MSGraph provider is a gamechanger. Today, I will show how you can use it to improve your Entra ID configuration and strengthen your security posture. cloudtips.nl/managing-ent...

I just sent out this week's Entra newsletter. 🚀 Most popular posts from last week 🥇Microsoft Introduces Restore Capability for Conditional Access Policies • Tony Redmond 🥈Why Setting Office IP as a Trusted Location in Conditional Access Is Risky • AIMA

🔥 Want to know how you can segment remote users in Azure Virtual WAN when they connect over Point to Site (P2S) VPN? cloudtips.nl/how-to-confi...

Today, @merill.net I are thrilled to announce the release of the new version of Maester on Azure Web App. cloudtips.nl/new-version-...

We just sent out this week's Entra news. Check it out at entra.news/p/entra-n...

☁️ Want to know how you can add an extra layer of protection to your Azure Backup setup? cloudtips.nl/keep-hackers...

🔥 Want to know how you can securely call Microsoft Graph from your Azure DevOps pipeline without relying on long lived secrets? cloudtips.nl/automating-m...

cloudtips.nl/expanding-az... It is now also possible to create Azure Maintenance Configurations for Virtual Network Gateway and Azure Firewall. In this blog I will explain why this is important and how to deploy it using Infrastructure as Code with Azure Bicep. 💪🏻

We just sent out this week's Entra newsletter. Get it at https://entra.news/

Time to enjoy vacation time in France! 🇫🇷

🚨 New in Maester! A dedicated Azure configuration section is now available to help you monitor and secure your Azure setup with automated tests. In my latest blog, I show you how to get started and walk you through the tests available today. cloudtips.nl/monitor-your...

💪🏻 Want to supercharge your Azure Bicep deployments? GitHub Copilot Custom Instructions are the key! I tested the Bicep Best Practices instruction from the official repository and it’s a real gamechanger. cloudtips.nl/power-azure-...

🔥 It’s here! The new msgraph Terraform provider is in public preview, letting you define your Microsoft Entra tenant setup directly in Terraform files. cloudtips.nl/terraform-fo...

In this video, I will demonstrate how to deploy a Microsoft Entra External ID tenant using Azure Bicep and configure authentication for an Azure App Service that uses it. 💪🏻 youtu.be/Ub2zXbbqJXE

Microsoft Security Copilot uses advanced generative AI to help security teams make rapid, scalable decisions and respond effectively. Today, I will show you how to deploy Microsoft Security Copilot using Azure Bicep 💪🏻 cloudtips.nl/deploy-micro...

Lately, I have been working on a new repository containing Entra ID PowerShell examples. This work also inspired me to create PowerShell scripts for Administrative Units. 💪🏻 cloudtips.nl/deploy-micro...

This week's Entra news is out with a LOT of features hitting GA and a new (and important) public preview. Check it out at 👉 entra.news

🎉 I am grateful and proud to share that I have been awarded as a Microsoft Most Valuable Professional (MVP) in the technology areas Azure Infrastructure as Code and Identity & Access, part of the categories Microsoft Azure and Security.

Recently, I was asked how to assign Microsoft Graph permissions using Azure Bicep. That’s why today I’ll show you how to assign Microsoft Graph permissions using Azure Bicep. cloudtips.nl/assign-micro...

Announcing GA of Bicep templates support for Microsoft Entra ID resources techcommunity.micros... #MicrosoftEntra #MicrosoftSecurity #Cybersecurity #Azure #AzureAD #Identity #CloudSecurity

This week's Azure Update is up. youtu.be/fcdA1iVrrYw LinkedIn - www.linkedin.com/pulse/azure-... #azure #cloud #microsoft #cloudcomputing #microsoftazure #azurecloud #azureadministrator #azurearchitect #microsoftcloud #azureupdate

🎯 New #BicepTip! Writing Bicep is great, but generating it with GitHub Copilot? That’s the real magic. Learn more about Bicep Infrastructure as Code generation using GitHub Copilot agent mode in the latest tip:
 🔗 www.linkedin.com/feed/update/... #azure #bicep #infrastructureascode

Today, I’m thrilled to announce the release of the Azure Cost CLI Terraform Module! This module streamlines the setup of the Azure Cost CLI in Azure DevOps and automates test execution via Azure DevOps Pipelines. 🔥 cloudtips.nl/the-azure-co...

We just sent out this week's Entra newsletter.

🔥New Maester Test - MT.1064: Ensure that write permissions are required to create new management groups By default, all Entra ID principals can create new management groups. This introduces governance and security risks, as it allows any user to create new management groups.

Wow, super awesome! I’ve been active on Reddit for the past three weeks and really love contributing. The community is incredibly active! If you have any questions or suggestions, feel free to join the conversations. My Reddit name is brianveldman.

Microsoft Entra External ID helps you control how customers log in to your apps. While you could create a Microsoft Entra External ID tenant using the portal with ClickOps, why not automate it? 🔥 cloudtips.nl/deploy-micro...

Today I’m spotting planes — aka Azure Landing Zones 😂

[Share] Learn Live: Set up Landing Zones for AI is now on with Ben, Orin, and Sonia! www.youtube.com/watc...

cloudtips.nl/deploy-to-az... In this blog, I’ll demonstrate how to register an Azure Extended Zone (AEZ) and show how easy it is to deploy to an AEZ, such as the one in Perth, using Azure Bicep. After all, why rely on ClickOps when you can automate? 💪

Currently working on a new repository with Entra ID PowerShell goodies. It includes examples for deploying Global Secure Access and Application Management Policies. If you have any great ideas, feel free to contribute or let me know. ❤️ github.com/brianveldman...

☁️ AzureFeeds - Newsletter for this week is out! 📅 Weekly Update: Saturday June 28 2025 to Saturday July 05 2025 azurefeeds.bmeurl.co...

In this blog, I explore how to integrate Entra ID and AI agent workflows in Azure Logic Apps. For example, to create Entra ID users or run Azure automations that update the Maester web app with a fresh Security and Compliance dashboard. 🔥 cloudtips.nl/integrating-...

With the release of Azure Bicep v0.36.1, a new CLI command group called snapshot for snapshot validation has been introduced. 🔥 cloudtips.nl/bicep-snapsh...

Have you read this week's Entra newsletter? #cybersecurity #entraid #identity

In this blog post, I’ll show you how to use Azure API Management as an AI gateway to connect remote MCP servers hosted in Azure Functions and secured with Entra ID authentication. ❤️ cloudtips.nl/how-to-secur...

Today, @johanvjr.bsky.social and I had the pleasure of diving into the power and efficiency of the Model Context Protocol (MCP). We showcased Lokka, an MCP implementation designed for seamless integration with Microsoft Graph and Azure APIs. Lokka is an initiative created by @merill.net ❤️

In this post, I’ll walk you through deploying DeepSeek on Azure Container Apps with serverless GPU support using Azure Bicep. cloudtips.nl/how-to-deplo...

Lokka is an implementation of the Model Context Protocol (MCP) for the Microsoft Graph and Azure APIs. In this blog, we’ll explore the power of Lokka. Lokka is an initiative created by @merill.net cloudtips.nl/azure-micros...

The Public Preview of the Azure MCP Server, bringing the power of Azure to your AI agents. The Azure MCP Server allows AI agents to take advantage of Azure resources for key workflows such as file storage, database and logs querying, and CLI commands. 🚀 cloudtips.nl/the-azure-mc...

We just sent out this week's Entra newsletter. Get it at https://entra.news ❣️

The Microsoft Zero Trust Workshop simplifies the complexity of today’s Security landscape by embracing Zero Trust concepts and architecture into a tailored, actionable roadmap. ❤️ cloudtips.nl/microsoft-ze...

This week's Entra newsletter just went out. Subscribe and read at entra.news/p/entra-n...